topic Trap logs in WLC in Wireless

Trap logs in WLC

mahesh18 — Sun, 04 Jul 2021 07:46:45 GMT

Hi everyone,

I see Trap logs in WLC

Rogue AP : 00:12:17:1a:33:3c removed from Base Radio MAC : 08:1f:f3:22:3c:70 Interface no:0(802.11b/g)
Rogue AP : 00:12:17:1a:33:3c detected on Base Radio MAC : 08:1f:f3:22:3c:70 Interface no:0(802.11b/g) on Channel 6 with RSSI: -85 and SNR: 8 and Classification: unclassified
Rogue AP : 00:12:17:1a:33:3c removed from Base Radio MAC : 08:1f:f3:22:3c:70 Interface no:0(802.11b/g)

Need to understand what does this log means?

Does it mean that there is someanother AP in the network and it has mac address of 0012:171a:333c?

I see these logs on and off in WLC.

Regards

Mahesh

Trap logs in WLC

Scott Fella — Fri, 06 Sep 2013 02:09:51 GMT

Anything that shows up as a rogue ap can be any 802.11 rf source and most likely is an access point. If you look at the Monitor > Rogue> Unclassified AP's that will give you a list of aps that are not part of your wireless and is considered rogues. This doesn't mean that its in your network, but it can be a neighboring access point from a business that is close to you, a home wireless or even a cellular hotspot.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

Trap logs in WLC

mahesh18 — Fri, 06 Sep 2013 03:01:02 GMT

Hi Scott,

I will try to trace this mac tomorrow.

So this is considered as Rogue because it is not registered to the WLC Right?

Also this AP can be of any vendor like non cisco?

Regards

Mahesh

Re: Trap logs in WLC

Scott Fella — Fri, 06 Sep 2013 03:07:41 GMT

That Mac is a radio Mac so you will not be able to see that on the wired side. Rogue AP's can also be Cisco AP's that are not part of your wireless network. Vendor wise, you would have to look that piece up if its unknown.

Sent from Cisco Technical Support iPhone App

Trap logs in WLC

mahesh18 — Fri, 06 Sep 2013 03:15:00 GMT

Many thanks Scott

Regards

MAhesh